Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Ask HN: Is Google Compute down?

news.ycombinator.com

Post reply on HN
Print view View original

71–80 of 80 posts

Re: Ask HN: Is Google Compute down?

#71

Post by londons_explore »

sterlind wrote: post #53
jamalex wrote: post #19

Despite the subdomain, the IP for ChinaTelecom-gw.transtelecom.net (217.150.59.249) seems to be based in Russia, as does the carrier: https://en.wikipedia.org/wiki/TransTelekom

Seems likely to be TT's gateway to CT. New theory: TransTelecom brought up a new gateway to ChinaTelecom, which incorrectly gossiped all advertisements from ChinaTelecom. This caused a leak, since CT has bgp highjacking of Google IP ranges for the GFW within China, but ordinarily doesn't leak them outside the country. TransTelecom misconfigured the gateway to broadcast everything advertised by ChinaTelecom, bringing…

I doubt the GFW uses BGP to route traffic to it.

It needs to filter traffic to any address, and wouldn't have specific google ranges configured.

Re: Ask HN: Is Google Compute down?

#72

Post by CydeWeys »

raesene9 wrote: post #50
CydeWeys wrote: post #34

We urgently need a solution for routing traffic to IP addresses that is better than BGP.

or ISPs could implement the proposed BGP security standards... that have been proposed for , well a long time.

Yeah, that'd be one possible solution. Point is it's not a solution yet because it isn't yet widely implemented, and may never be.

Re: Ask HN: Is Google Compute down?

#73

Post by viraptor »

faissaloo wrote: post #65
xolox wrote: post #40

Reading through the comments here I'm recognizing "China Telecom" from an article on a BGP hijack that was published about a week ago, I still had the article open in my browser: https://arstechnica.com/information-technology/2018/11/stran... In another comment in this thread I read: > Seems like its time to start or accelerate a working group on secure BGP. Indeed things can't go on like this for much longer...

I kept getting SSH bruteforce attempts from IPs on China Telecom a while back. Wonder what they're up to...

These are botnets. You're going to get ssh bruteforce attempts from every country. I wouldn't read into it too much.

Re: Ask HN: Is Google Compute down?

#74

Post by garysahota93 »

sethvargo wrote: post #18

Hi all - Seth from Google here. Our team is aware and we are working on mitigation. In short, a third party telco provider is advertising on one of our IP blocks. Unfortunately that's all the information I can share at this time.

I love that Google monitors this site. I really appreciate you reaching out and letting us know the current status!

Re: Ask HN: Is Google Compute down?

#76

Post by est »

docker_up wrote: post #35
regnerba wrote: post #8

Google IPs seem to be being routed to China for us. We have servers in San Jose that cannot access Google services. Trace route shows everything going to China when leaving the San Jose data center. We can access the same services from Vancouver just fine.

How many times does this have to happen before China's privileges to do things like this get revoked? At this point, it can't be just a mistake and must be some state-sponsored hacking. Seems like a great way to find out where a particular Spotify user's IP address is.

> China's privileges to do things like this get revoked

By revoking China's privileges, you reinventing the Great Firewall. Or at least part of how it works, by "revoking routing privilege of selected IP ranges."

You know what, that's the narrative of China's wall building proposal in the place. To end USA's "Internet supremacy" and to advocate "Internet sovereignty".

Re: Ask HN: Is Google Compute down?

#77

Post by leetbulb »

kacy wrote: post #30
TodayIsTheDay wrote: post #7

Does anybody else have chinatelecom-gw.transtelecom.net [217.150.59.249] in the traceroute for www.google.com

Also showing up on a traceroute to spotify.com for me.

Gitlab.com as well, earlier.

17 195.219.156.146 (195.219.156.146) 152.490 ms 152.423 ms *

18 * * mskn17ra-lo1.transtelecom.net (217.150.55.21) 198.658 ms

19 * * Google-gw.transtelecom.net (217.150.44.9) 192.230 ms

20 * * 108.170.250.111 (108.170.250.111) 172.086 ms

Re: Ask HN: Is Google Compute down?

#78

Post by timdierks »

konschubert wrote: post #47
jldugger wrote: post #41

Earlier quoted context omitted.

> This kind of thing should not be possible. It sounds like you're asking google to solve https://en.wikipedia.org/wiki/BGP_hijacking ?

Sorry, I didn't intend it to be directed at google.

The Internet is assembled out of duct tape. We apologize for the design.

Re: Ask HN: Is Google Compute down?

#79

Post by tinus_hn »

QML wrote: post #69
tinus_hn wrote: post #64

Earlier quoted context omitted.

You don’t need to cut the internet in half to limit China to routing IP adresses that are allocated to China.

IIRC, Google can try to dictate a BGP policy that says not to accept any routes that goes through China. However, without any verification checks (via cryptography), an entity can lie about the path that they are advertising.

No, the peers just outside of China can choose to reject advertisements of Google by China. Google can’t do much.

Re: Ask HN: Is Google Compute down?

#80

Post by red0point »

konschubert wrote: post #31
sethvargo wrote: post #18

Hi all - Seth from Google here. Our team is aware and we are working on mitigation. In short, a third party telco provider is advertising on one of our IP blocks. Unfortunately that's all the information I can share at this time.

EDIT: This is a general statement, I am not complaining to google here. This kind of thing should not be possible. Are there any protocol proposals or other kind of upgrades to the routing protocols that would prevent these kind of mistakes/attacks?

Yes there is an approach out there, solving many problems of the internet at once. It‘s called SCION and is being used in production at large swiss banks today.

https://www.scion-architecture.net/

Post reply on HN